PT-2012-3105
CVE-2012-1174
·
Publicado
2012-07-12
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
3.3
BaixaMétricasAV:L/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
systemd versions prior to 44
Description
The issue concerns the rm rf children function in util.c within the systemd-logind login manager. It allows local users to delete arbitrary files via a symlink attack on unspecified files related to user session records when logging out.
Recommendations
For versions prior to 44, update to version 44 or later to resolve the issue. As a temporary workaround, consider restricting access to the rm rf children function until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾